spdx@lists.spdx.org

Home Messages Hashtags Subgroups

Messages

Between

and

Possible Vendor Day

Sending this to the SPDX list per Gary’s suggestion at today’s SPDX tech team meeting. . Last Week I attended a FERC-DOE supply chain technical conference and a suggestion was made to host a

By Dick Brooks · #1610 ·

Your feedback as open source licenses expert/user about OSLiFe-DiSC tool

Dear all, A step forward to automate license processing is to characterize legal terms dealt with by licenses and describe licenses accordingly in order to reach a standardized model. To that end, we

By Sihem Ben Sassi · #1609 ·

Re: Interpreting SPDX Validator Error: SpdxIdInUseException ... ExtractedLicensingInfo

Thank you, Gary! I wasn't sure where the right place was to ask this question. Issue submitted with example: https://github.com/spdx/spdx-online-tools/issues/414

By Keith Zantow · #1608 ·

Re: Interpreting SPDX Validator Error: SpdxIdInUseException ... ExtractedLicensingInfo

Hi Keith, The “Unexpected Error” usually indicates an issue with the validation tool itself. Can you post an issue at https://github.com/spdx/spdx-online-tools/issues and attach a file that

By Gary O'Neall · #1607 ·

Interpreting SPDX Validator Error: SpdxIdInUseException ... ExtractedLicensingInfo

Hi, I'm using the SPDX online validator and I'm trying to understand what this error means. Could someone shed some light on it? Analysis exception processing SPDX file: Unexpected Error:

By Keith Zantow · #1606 ·

Re: SPDX creation phase

Having also been in that call I would also like this clarification. The idea behind having this information available is for the recipient to make her or his own judgement on how accurate they expect

By Jimmy Ahlberg · #1605 ·

FERC-DOE Supply Chain Technical Conference on December 7, 2022 at FERC HQ in Washington.

Hoping to meet some people at this supply chain technical conference in Washington on December 7. Please come out and show your support for SBOM in software supply chains and meet many of the

By Dick Brooks · #1604 ·

Re: SPDX creation phase

Hi Steve, I’m going to include the SPDX tech group on the email thread – sorry to many of you for the duplication. Steve – If you’re a member of that email we can continue the thread

By Gary O'Neall · #1603 ·

Re: SPDX creation phase

Steve, SBOM’s are created to serve a purpose, for example some SBOM’s are used for license management, some are used for dependency tracking and the one I’m most familiar with is an SBOM

By Dick Brooks · #1602 ·

SPDX creation phase

Hi all, One of the suggestions in today’s call for the OpenChain Telco SIG, where we’re discussing proposals for an SBOM standard for the Telecommunications industry, was: > SBOMs

By Steve Kilbane · #1601 ·

Re: Thurs SPDX General Meeting Reminder

Small correction: Thurs is Dec 1. From:spdx@... <spdx@...> on behalf of Phil Odence via lists.spdx.org <phil.odence=synopsys.com@...> Date: Wednesday, November 30, 2022 at 10:16 AM To: SPDX-general

By Phil Odence · #1600 ·

Thurs SPDX General Meeting Reminder

This month we’ll have a couple special presentations. Gary will give a debrief on Wednesday’s docfest. Alexios will walk is through the GitHub 3.0 directories so everyone knows how to

By Phil Odence · #1599 ·

Re: SBOM Survey

This survey was a great start to gather feedback about SBOM, but it would be good to get some questions about AI sBOM, they need additional information collected

By karen.bennet · #1598 ·

SBOM Survey

Dear SPDX Community, The SEMERU research lab from William and Mary is conducting an online survey to understand issues, needs, and opportunities related to software supply chain management through

By Wintersgill, Nathan · #1597 ·

FOSDEM 2023 - SBOM devroom info and CfP

[this is also available as https://gist.github.com/zvr/c852b4a560ac2c67885c473034cd4a93] # FOSDEM 2023 - SBOM devroom info and CfP ## Overview [FOSDEM] is one of the world's premier

By Alexios Zavras · #1596 ·

SPDX Thurs General Meeting Reminder

EMEA folks- US had not changed clocks yet, so the meeting time at 11EDT is an hour off from normal for you. We will have a special presentation from Thomas Steenbergen about how we have been

By Phil Odence · #1595 ·

Re: Unicode

With the colossal caveat that I am only a **consumer of** Unicode's deliverables, I could speak briefly to the concern at point #3: This is certainly inconvenient, but the Unicode site does host quite

By Nathan Willis · #1594 ·

Unicode

Dear all, I'm wondering why https://spdx.org/licenses/Unicode-TOU.html is (still) part of the license list. Could it be deprecated? 1. First of all, the current text of the "Unicode® Copyright and

By Till Jaeger · #1593 ·

IMPORTANT REMINDER: Telco Work Group meeting today - Telco SBOM Spec in Drafting

Dear all The OpenChain Telco Work Group has a meeting today at 17:00 CEST (15:00 UTC). This meeting will be of special interest to anyone working on matters related to SBOMs, as the work group is

By Shane Coughlan · #1592 ·

SPDX Thurs General Meeting Reminder

This month’s presentation will be one of the every popular reports on a Google Summer of Code project: Project Title: NTIA Conformance Checker – Josh Lin Project Abstract: This project

By Phil Odence · #1591 ·

81 - 100 of 1690

Home Hashtags Subgroups Terms